This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
File:                     o0K4Har3eauhbTK2-wuDD4ULT_A.mft (raw, json)
Hash identifier:          qCMxJ8g9w/VW7ZlNUm8ue6F92593VPcwKf3iLtlgfaI=
Subject key identifier:   42:95:7D:91:DF:37:80:DF:C8:0C:97:E9:B4:40:B2:66:49:60:3F:F8
Authority key identifier: A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0
Certificate issuer:       /CN=A91A1205/serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0
Certificate serial:       0C3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
Manifest number:          0C34
Signing time:             Sat 06 Dec 2025 18:00:32 +0000
Manifest this update:     Sat 06 Dec 2025 18:00:31 +0000
Manifest next update:     Sat 13 Dec 2025 18:00:31 +0000
Files and hashes:         1: o0K4Har3eauhbTK2-wuDD4ULT_A.crl (hash: 4wknBL4UIjl5DecqBuxgNTijHFnCOJM7hifT8neC39c=)
                          2: 3D992D3A1A8411EAA026D229C4F9AE02.roa (hash: j0DWhsEHoal3Q4LsD1CyE+J4i6jhKjEMjW9pXFwYCvw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl
                          rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 13 Dec 2025 18:00:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3130 (0xc3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A1205, serialNumber=A342B81DAAF779ABA16D32B6FB0B830F850B4FF0
        Validity
            Not Before: Dec  6 18:00:31 2025 GMT
            Not After : Dec 13 18:00:31 2025 GMT
        Subject: CN=69346f40-85a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8a:73:a9:e6:c7:84:0b:38:9a:48:ff:23:f3:
                    73:1e:31:37:39:67:34:0f:99:45:04:03:21:d9:fd:
                    2e:20:52:34:d9:e5:05:c8:cc:c2:15:4b:a4:5d:9c:
                    ee:46:dc:03:a0:65:dd:be:7c:6e:d9:75:73:c7:42:
                    fb:9c:aa:e8:0e:5e:8e:35:da:f4:3c:b5:8c:16:39:
                    b3:d9:94:06:b2:20:d8:73:f8:42:ec:34:22:22:5c:
                    37:92:52:86:98:94:0b:77:6b:db:32:06:0a:44:5a:
                    d8:32:2c:50:e2:2b:76:d6:97:dd:f3:2a:ee:ce:a9:
                    be:51:95:a2:0c:1f:3b:41:e7:94:20:55:1e:f0:44:
                    06:d5:df:ed:b4:90:87:0b:f1:61:d0:c9:e2:35:1d:
                    7a:58:1b:68:9f:93:f6:d2:ad:7f:c9:48:62:56:0c:
                    78:6f:f9:47:0c:72:7c:ca:d2:91:69:cf:46:3a:8c:
                    b3:06:19:10:c5:8c:9d:d1:ff:c9:d9:c4:76:c4:fa:
                    40:67:54:aa:e1:99:bb:7b:a7:34:db:32:65:92:ff:
                    6d:e4:e6:66:f8:99:df:05:81:c7:39:5c:4b:9d:b0:
                    9b:9b:83:da:7f:ea:82:7d:14:ec:8d:94:b4:ed:32:
                    e6:c7:4a:7d:3c:93:0a:6d:84:0e:b9:ad:31:15:38:
                    9a:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:95:7D:91:DF:37:80:DF:C8:0C:97:E9:B4:40:B2:66:49:60:3F:F8
            X509v3 Authority Key Identifier:
                keyid:A3:42:B8:1D:AA:F7:79:AB:A1:6D:32:B6:FB:0B:83:0F:85:0B:4F:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o0K4Har3eauhbTK2-wuDD4ULT_A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A1205/7D231E041A5511EA88042211C4F9AE02/o0K4Har3eauhbTK2-wuDD4ULT_A.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:42:50:4b:47:76:e2:07:52:a8:ac:d4:f1:b6:c6:1c:9d:55:
         e5:65:cf:36:dd:3c:d9:e4:7b:27:97:30:85:ff:03:3d:8a:b2:
         0b:6e:6a:98:f8:7b:e6:f1:17:57:ea:5f:a3:32:77:3a:a6:c9:
         ba:2e:95:85:e9:32:79:44:43:b1:fb:30:e8:1a:1e:3f:9b:0b:
         ea:3c:83:28:64:28:2e:43:8c:17:30:13:17:d2:a9:5e:e5:ad:
         07:72:fb:c2:c7:b6:f7:7f:bb:11:03:1c:f9:4f:55:8e:f5:8d:
         8b:d0:71:df:00:aa:5c:43:b3:a0:da:1d:17:5a:fb:f2:0a:9f:
         4c:04:d7:7e:f2:5c:9b:f0:d3:83:83:75:83:41:ec:5a:dc:d8:
         85:d9:4c:ec:b5:45:37:1e:3b:ba:9d:de:75:4a:05:0d:9d:18:
         29:11:42:f9:fb:1e:30:ba:48:ff:33:7d:4b:db:6b:ee:fa:3d:
         1f:41:d7:48:de:86:34:e6:d9:f2:a3:bf:7a:80:3d:c6:98:43:
         39:8a:67:a6:17:a6:c9:94:1c:f5:90:eb:b7:42:08:f3:e3:4b:
         95:cc:ac:49:1b:f9:b7:ab:c3:a0:a2:76:f8:50:9c:9b:cd:25:
         a3:2d:6f:7f:5d:f8:e5:ed:36:eb:06:de:86:4f:6b:e6:7b:22:
         78:dc:3e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Dec 7 00:59:48 2025 by rpki-client